Your data
Privacy Policy
How Baranka Books collects, uses, and protects your personal data, and the rights you have over it. We're based in the Netherlands and follow the GDPR.
Who’s responsible
Baranka Books (the Netherlands), KvK 56819676, BTW NL296906542B01, is the controller of your personal data. Reach us any time via the contact page.
What we collect, and why
- Order details: your name, email, and the country you’re billed in (to work out VAT) — used to take payment, fulfil your order, and support it. We sell digitally, so we don’t collect a delivery address. Basis: performing our contract with you.
- Payment: processed by Stripe. We’re told whether a payment succeeded; we never see or store your card number.
- Reading details: for a bespoke reading we ask, after purchase, only for what that reading needs — for the Celestial Codex, your full birth name and your birth date, time, and place. We use them only to create your reading. By default we erase the birth details you enter as soon as your reading is delivered (you can instead ask us to keep them, only for as long as the law permits, for future readings). The finished reading itself is a laid-out book that shows your chart, so it holds your birth information — how long we keep that is set out in How long we keep it below. Basis: performing our contract.
- Newsletter: your email and the worlds you chose, used only after you confirm by email (double opt-in). Basis: your consent, which you can withdraw any time.
- Print-edition interest: if you register interest in a printed or heirloom edition, your email, your country, and which edition(s) you chose — used only after you confirm by email (double opt-in) to gauge demand and let you know when those editions are available in your region. Basis: your consent, which you can withdraw any time.
- Contact messages: your name, email, and message, so we can reply. Basis: answering your request.
For visitor statistics we use Matomo, self-hosted on our own server (EU), run cookieless and with IP addresses anonymised, so there’s no third-party analytics, no tracking cookies, and no way to single you out. We don’t run advertising trackers, and we never sell your data.
Cookies & storage
We set no tracking or advertising cookies. The only cookies are the strictly-necessary ones our payment provider, Stripe, sets on the checkout page to help prevent fraud. Your shopping cart lives in your browser’s local storage — it stays on your device, and nothing in it reaches us until you check out.
Who we share it with
Only the services that make an order work, each acting on our instructions or under its own policy:
- Stripe: payment processing.
- Brevo: our email platform (order emails, reading questionnaires, the newsletter).
- mijn.host: our hosting, in the Netherlands.
Our typefaces are served from our own site, with no font CDN, so nothing about your visit goes to a third party just to render the page. Where any of these process data outside the EEA, it’s covered by the appropriate safeguards (such as the EU Standard Contractual Clauses).
How long we keep it
Order and invoice records for as long as the law requires — Dutch tax rules mean up to seven years. The birth details you enter for a reading are erased once your reading is delivered, or, if you asked us to keep them, only for as long as the law permits. Your finished reading is kept beyond your download window only if you asked to be notified about a print edition: we then preserve it until you receive that edition or opt out of those notifications, after which it’s erased. You can ask us to delete it sooner and we will — that simply ends the option to order it in print later with your purchase credited. Newsletter details until you unsubscribe.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it elsewhere, and you can withdraw any consent at any time. Just get in touch via the contact page. If you’re not satisfied, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.